I’ve been hard at work actually implementing the API and now we have actual auth routes! To ensure security I’ve gone with a JWT + Refresh token setup, where the refresh token is always in the cookies (and httponly) to avoid token snatching if there’s ever an XSS exploit.

In addition to that I’ve also cleaned up the code a bit and tried my best to make it more semantic and readable so I can actually maintain it :3 This includes some OOP for the responses, errors and requests since that kind of makes my life easier when I want to add more of those!

I’ve attached a screenshot of the signup API call down below since there isn’t much of a visual to show right now :>